Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20a1f318-d5af-3267-8b5d-adcc8e99fbca.roa
File:                     20a1f318-d5af-3267-8b5d-adcc8e99fbca.roa (raw, json)
Hash identifier:          BJ8RSS6VJCnIxzLvC+/74qUfQ4Y/Np7s4eva5n8qcEE=
Subject key identifier:   2D:F3:9C:DE:55:82:7B:F8:DC:75:57:C7:DD:76:21:2D:EE:BB:16:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FACBBB8782A379064BAD040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20a1f318-d5af-3267-8b5d-adcc8e99fbca.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        74.94.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:bb:b8:78:2a:37:90:64:ba:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=7e195c47-22bc-4e3e-bf82-5782b1ef2603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d1:a3:cc:0c:d0:fc:40:57:87:19:64:b3:f5:
                    9e:1a:2a:6d:2a:e0:b2:bb:6a:59:d1:b4:1f:b1:75:
                    1a:5f:67:41:07:4c:64:73:f9:3e:f2:f3:e1:46:50:
                    17:4b:40:3a:da:78:20:17:dd:f1:e7:46:e0:ed:91:
                    d2:b6:65:95:07:ed:79:a2:61:9e:54:c3:44:db:2a:
                    4a:63:1d:d4:7a:d5:17:5c:8c:de:20:34:46:6c:f0:
                    60:58:83:be:3c:96:eb:aa:21:b7:49:26:90:c9:60:
                    5a:2e:f6:76:0e:1a:1f:12:c0:38:75:87:67:36:f1:
                    23:09:a5:7a:a4:63:03:86:7f:e0:42:9b:1e:b2:6b:
                    15:32:81:7a:f0:97:a1:41:f5:6b:82:a0:33:c1:16:
                    6b:bf:87:b4:bd:6a:31:bf:2d:9e:7f:98:c7:bc:f7:
                    60:e0:42:f7:ea:7b:83:ab:7a:b5:44:3e:ca:bf:31:
                    fe:50:0f:df:cf:d3:bc:35:1e:b7:0a:fe:f5:8d:70:
                    2c:e8:c7:b6:8a:b9:eb:56:b3:39:03:dd:af:6b:ed:
                    28:53:16:9a:57:47:9f:c8:59:52:ef:88:59:dd:d9:
                    3b:ab:fd:88:7b:2c:06:b0:92:06:b1:7b:df:31:3f:
                    19:94:79:df:0e:d1:31:d5:3e:39:99:55:4f:06:db:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F3:9C:DE:55:82:7B:F8:DC:75:57:C7:DD:76:21:2D:EE:BB:16:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20a1f318-d5af-3267-8b5d-adcc8e99fbca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.94.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:9d:56:c0:06:34:e4:d1:e0:78:68:fb:96:b0:5a:f9:67:d0:
         6e:8d:81:e6:d3:67:f1:5f:a0:dd:41:11:95:fa:b5:42:a1:2a:
         30:e9:f8:c2:fd:37:e7:01:b0:28:c8:38:9d:ae:56:f5:49:bb:
         88:0f:55:90:86:19:7d:2c:74:81:60:c0:46:12:0c:26:13:48:
         35:ba:bc:b8:d6:0d:43:b7:ac:65:97:f4:bc:93:fc:96:dc:79:
         4e:59:0e:0d:e0:53:82:ba:21:08:87:33:6b:9b:18:ca:22:78:
         2f:46:e1:3c:47:5f:d4:70:19:14:9c:7b:20:4b:c0:08:ac:65:
         cd:03:3d:da:b5:b4:9a:e9:5d:21:6c:0b:e3:9a:9f:ff:6f:5e:
         8d:4b:4a:49:67:e4:39:12:5e:c2:3e:85:1f:9e:ab:49:7b:d1:
         09:cc:7b:12:53:27:ab:ee:3e:92:1a:46:29:ee:f2:49:e4:3a:
         80:e4:b8:61:eb:f5:8b:95:09:aa:1f:10:3a:cd:f6:4a:c5:2a:
         40:fc:21:a0:ae:0b:5a:a2:ba:b4:c0:37:d2:c3:ff:02:ff:c8:
         e2:aa:ba:bf:87:ec:be:28:f1:33:77:96:47:49:0f:5e:c9:6b:
         94:75:05:32:44:00:f3:c6:27:60:82:d1:e0:c6:37:16:a2:31:
         35:4a:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:45:48 2024 by rpki-client on console-fra.rpki-client.org